Security & trust
Built for assurance programmes that cannot afford soft edges.
V77 Trust treats governance data as regulated evidence. Access is role-based, evidence is integrity-checked, and operational changes leave a verifiable trail.
Multi-tenant RBAC
Organisation-scoped memberships with admin, AI owner and auditor roles. Sessions bind a user to a single org context.
Hash-chained evidence
Evidence objects live in Cloudflare R2 with integrity hashing so auditors can detect tampering of stored artefacts.
Immutable activity log
Security-relevant actions append to a hash-chained audit log. Prior entries are never updated or deleted.
Request hardening
Security headers, CSRF protections on mutating routes, and rate limits on public endpoints such as pilot requests and login.
API keys with roles
Org API keys for /api/v1 carry explicit roles and can be revoked. Keys are stored hashed, not in clear text.
Infrastructure posture
Deployed as a Cloudflare Worker with D1 and R2. Real model providers stay gated behind an explicit enable flag.
Questions about our security programme? Email contact@vertex77.com or request a pilot. Operator: Vertex77 sp. z o.o., ul. Świeradowska 47, Warszawa, Poland.